CVE-2020-11213
published 2021-01-21CVE-2020-11213: Out of bound reads might occur in while processing Service descriptor due to improper validation of length of fields in Snapdragon Auto, Snapdragon Compute…
critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
Out of bound reads might occur in while processing Service descriptor due to improper validation of length of fields in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
osv8.8HIGH
Android
CVE-2020-11213: Closed-source component
vendor_android·2020-12-01·CVSS 9.8
CVE-2020-11213 [CRITICAL] CVE-2020-11213: Closed-source component
Android Security Bulletin 2020-12-01
CVE: CVE-2020-11213
Severity: HIGH
Component: Closed-source component
References: A-168050861
*
GHSA
GHSA-9c7c-w7q8-pf7c: Out of bound reads might occur in while processing Service descriptor due to improper validation of length of fields in Snapdragon Auto, Snapdragon Co
ghsa_unreviewed·2022-05-24
CVE-2020-11213 [CRITICAL] CWE-125 GHSA-9c7c-w7q8-pf7c: Out of bound reads might occur in while processing Service descriptor due to improper validation of length of fields in Snapdragon Auto, Snapdragon Co
Out of bound reads might occur in while processing Service descriptor due to improper validation of length of fields in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
OSV
libjpeg9 vulnerabilities
osv·2022-03-23·CVSS 8.8
CVE-2016-3616 libjpeg9 vulnerabilities
libjpeg9 vulnerabilities
Aladdin Mubaied discovered that the cjpeg utility in libjpeg9 did not properly
validate the input image's size. An attacker could possibly use this issue to
cause a denial of service or execute arbitrary code. (CVE-2016-3616)
It was discovered that the cjpeg utility in libjpeg9 incorrectly handled
certain input. An attacker could possibly use these issues to cause a denial of
service. (CVE-2018-11212, CVE-2018-11813, CVE-2020-14152, CVE-2020-14153)
It was discovered that the cjpeg utility in libjpeg9 incorrectly handled
memory when supplied with certain input. An attacker could possibly use these
issues to cause a denial of service or execute arbitrary code.
(CVE-2018-11213, CVE-2018-11214)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2021-01-21
Published